Hi, the converter is called "Key = Value Pairs to Fields" in the drop down.
Cheers, Jochen On Thursday, 1 September 2016 10:56:28 UTC+2, AForton wrote: > > I currently don't have that converter in converters drop-down-list. Where > to find it? I use > *graylog v2.1.0-beta.2-ffa3355* > четверг, 1 сентября 2016 г., 10:44:39 UTC+3 пользователь Jochen Schalanda > написал: >> >> Hi, >> >> I think that's not possible with Grok, but you could try to use the >> Tokenizer converter (create a Copy Input extractor, then select the >> Tokenizer converter) for this. >> >> Cheers, >> Jochen >> >> On Wednesday, 31 August 2016 14:19:39 UTC+2, AForton wrote: >>> >>> Is it possible to extract dynamic field name with grok? For instance, I >>> have the following message: >>> >>> Test message key=value key_1=value_1 key_2=value_2 ... etc >>> >>> The number n in key_n=value_n is not specified and may vary from message >>> to message. I need to extract all fields but with key1 and key3: >>> >>> key=value >>> key_2=value_2 >>> key_4=value_4 >>> key_5=value_5 >>> key_6=value_6 >>> //etc... >>> >>> How can I do this? Is it possible to do with GROK? >>> >> -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/74d48adc-347e-428a-b6ba-c6f947ca6b8a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
